Description
Jenkins Azure PublisherSettings Credentials Plugin 1.2 and earlier stored credentials unencrypted in the credentials.xml file on the Jenkins master where they could be viewed by users with access to the master file system.
Remediation
References
http://www.securityfocus.com/bid/108045
https://jenkins.io/security/advisory/2019-04-17/#SECURITY-844
Related Vulnerabilities
CVE-2021-41182 Vulnerability in maven package org.webjars:jquery-ui
CVE-2019-18213 Vulnerability in maven package org.lsp4xml:org.eclipse.lsp4xml.extensions.emmet
CVE-2017-16137 Vulnerability in npm package debug
CVE-2022-25901 Vulnerability in maven package org.webjars.npm:cookiejar
CVE-2018-10936 Vulnerability in maven package org.postgresql:postgresql